Vulnerabilities > Mozilla > Firefox > 105.0

DATE CVE VULNERABILITY TITLE RISK
2023-06-02 CVE-2023-32215 Out-of-bounds Write vulnerability in Mozilla Firefox
Memory safety bugs present in Firefox 112 and Firefox ESR 102.10.
network
low complexity
mozilla CWE-787
8.8
2022-12-22 CVE-2022-42927 Origin Validation Error vulnerability in Mozilla Firefox
A same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking the result of a redirect, via `performance.getEntries()`.
network
low complexity
mozilla CWE-346
8.1
2022-12-22 CVE-2022-42928 NULL Pointer Dereference vulnerability in Mozilla Firefox
Certain types of allocations were missing annotations that, if the Garbage Collector was in a specific state, could have lead to memory corruption and a potentially exploitable crash.
network
low complexity
mozilla CWE-476
8.8
2022-12-22 CVE-2022-42929 Unspecified vulnerability in Mozilla Firefox
If a website called `window.print()` in a particular way, it could cause a denial of service of the browser, which may persist beyond browser restart depending on the user's session restore settings.
network
low complexity
mozilla
6.5
2022-12-22 CVE-2022-42930 Race Condition vulnerability in Mozilla Firefox
If two Workers were simultaneously initializing their CacheStorage, a data race could have occurred in the `ThirdPartyUtil` component.
network
high complexity
mozilla CWE-362
7.1
2022-12-22 CVE-2022-42931 Cleartext Storage of Sensitive Information vulnerability in Mozilla Firefox
Logins saved by Firefox should be managed by the Password Manager component which uses encryption to save files on-disk.
local
low complexity
mozilla CWE-312
3.3
2022-12-22 CVE-2022-42932 Out-of-bounds Write vulnerability in Mozilla Firefox
Mozilla developers Ashley Hale and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 105 and Firefox ESR 102.3.
network
low complexity
mozilla CWE-787
8.8
2022-12-22 CVE-2022-45406 Use After Free vulnerability in Mozilla Firefox
If an out-of-memory condition occurred when creating a JavaScript global, a JavaScript realm may be deleted while references to it lived on in a BaseShape.
network
low complexity
mozilla CWE-416
critical
9.8
2022-12-22 CVE-2022-45421 Out-of-bounds Write vulnerability in Mozilla Firefox
Mozilla developers Andrew McCreight and Gabriele Svelto reported memory safety bugs present in Thunderbird 102.4.
network
low complexity
mozilla CWE-787
8.8
2022-12-22 CVE-2022-46871 An out of date library (libusrsctp) contained vulnerabilities that could potentially be exploited.
network
low complexity
mozilla debian
8.8